Permission required when using Intent to call phone?

Question

In one of my apps I'm using the following code to issue a phone call:

Intent intent = new Intent(Intent.ACTION_CALL, Uri.parse(...)); 
startActivity(intent);

The docs say I do need the following Manifest permission to do so:

<uses-permission android:name="android.permission.CALL_PHONE" />

Is this really required? I do not understand the difference between a phone and a camera feature. When using a phone intent I do need a permission but I don't need permission for a camera intent:

Intent intent = new Intent(MediaStore.ACTION_IMAGE_CAPTURE);
...
startActivityForResult(intent, 1);

Is there a list on hardware features that need a permission if fired with the help of an intent and those that don't?

Solution 1

Is this really required?

Yes.

I do not understand the difference between a phone and a camera feature.

Phone calls can cost people money. Hence, if you directly place a phone call (vs. ACTION_DIAL to just put the number in the dialer), Android wants the user to agree ahead of time to allow this.

Taking pictures with the camera does not usually directly cost users any money.

Is there a list on hardware features that need a permission if fired with the help of an intent and those that don't?

Not really.

Solution 2

Actually, if you wish to just open the dialer with a specific phone number, without direct calling (needs user confirmation), you can do it without any permission:

Uri uri = Uri.parse("tel:" + PHONE_NUMBER);
Intent callIntent = new Intent(Intent.ACTION_DIAL, uri);
try {
    context.startActivity(callIntent);
} catch (ActivityNotFoundException activityNotFoundException) {
    // TODO: place code to handle users that have no call application installed, otherwise the app crashes
}

Solution 3

When you issue a request to the camera, it merely opens an app requiring user interaction before it can do anything.

Phone calls open an app with the phone number already entered so you merely just have to press a button.

There's a much higher risk that you'll accidentally call someone than if you were to accidentally take a picture (Which you could just delete if taken accidentally.)

Comments

[Harald Wilhelm]

Thanks a lot. I do understand now.

[Shaihi]

Stumbled on this answer by chance now. Should it be updated (the last part) with the following link: developer.android.com/guide/topics/manifest/… ?

[CommonsWare]

@Shaihi: Not really. The OP was really asking what Intent actions imply certain permissions, which is not covered by the link you supplied.

[Umair]

This solved my problem. This will give user control over what happens.

[droidev]

@CommonsWare I think Intent.ACTION_CALL will work without CALL_PHONE permission. but for ACTION_DIAL permission is required.

[CommonsWare]

@droidev: You have that backwards. ACTION_DIAL does not require a permission, because it does not actually place a phone call. ACTION_CALL does require a permission.

[droidev]

@CommonsWare Yes, perfect